create-conclave-team
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
bash scripts/sync-shared-content.shas part of its registration and validation phase. This is an expected action within the project's workflow to synchronize shared principles and validate the structure of newly forged skills. - [DATA_EXPOSURE]: The skill reads several project configuration files, including
CLAUDE.md,plugin.json, and existingSKILL.mdfiles. This is done to maintain project conventions and verify the environment. It explicitly includes security guidelines (Shared Principle #4) that forbid agents from including credentials or PII in prompts, messages, or artifacts. - [DYNAMIC_EXECUTION]: The skill generates new
SKILL.mdand persona files at runtime. This process is heavily audited by internal agents ('Interrogator' and 'Forge Auditor') which review draft prompts and structural compliance before files are written to disk. This multi-layered review serves as a defensive measure against generating unsafe or malformed agent instructions. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input (the concept prompt) to generate new agent instructions. It addresses this risk through the 'Interrogator' agent, which is specifically tasked with pressure-testing draft prompts against adversarial questions and failure modes (Iron Law #05) before finalizing the skill.
Audit Metadata